Method and device for computing program slices

Abstract

Embodiments of the invention disclose a computing program slicing method and apparatus which can improve accuracy of detection results of terminal application safety. The method comprises the steps of: receiving a target method after smali byte codes of a terminal application are obtained, obtaining a target smali byte code for calling the target method from the smali byte codes of the terminal application, and determining a target position of the target smali byte code in the smali byte codes of the terminal application; obtaining a first program slicing corresponding to a calling parameter of the target method at the target position through a preconfigured backtracking algorithm; obtaining an upper caller method for calling the target method according to a preconfigured function call graph CG if the fact that initialization of the calling parameter of the target method is not tracked back through the backtracking algorithm is determined; processing the upper caller method through the backtracking algorithm in a recursion manner, and obtaining a second program slicing corresponding to the calling parameter of the target method; and obtaining a calling parameter value of the target method according to the first program slicing and the second program slicing.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method and device for calculating program slices. Background technique [0002] As the Android (Android) system is more and more widely installed in smart phones, tablet PCs and digital TVs, the security issues of Android terminal applications are becoming more and more prominent. After malicious applications invade the system, they can obtain private information such as user accounts, login passwords, and chat records, and can also perform malicious operations such as illegally subscribing to services and sending text messages, which damages the interests of users. How to effectively and accurately detect the security of Android system terminal applications has become a crucial issue. [0003] Currently, there are two methods for analyzing terminal applications of the Android system: static analysis and dynamic analysis. When analyzing non-open-source Android terminal app...

AI Technical Summary

Problems solved by technology

[0004] However, no matter it is a static analysis method or a dynamic analysis method, due to information loss in the process of obtaining the smali bytecode, it is impossible to accurately obtain the call parameter value of the target method, so that the terminal application can describe the behavior of the target method at a granularity Thick, the accuracy of the analysis results of terminal application security is not high

Images